Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jxkl4prgOdQ2Gda09kQss3yelwU.cer
File:                     Jxkl4prgOdQ2Gda09kQss3yelwU.cer (raw, json)
Hash identifier:          w4CKJuRqH9f3kFWeyipZyilsDCEfNL2uhyU33m5H4pg=
Subject key identifier:   27:19:25:E2:9A:E0:39:D4:36:19:D6:B4:F6:44:2C:B3:7C:9E:97:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FB010576E0F063F3309571CECE7313E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8f/994e86-d57f-49cf-8246-f776d3336c62/1/Jxkl4prgOdQ2Gda09kQss3yelwU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8f/994e86-d57f-49cf-8246-f776d3336c62/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:34:47 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.18.102.0/24
                          IP: 2a12:6400::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b0:10:57:6e:0f:06:3f:33:09:57:1c:ec:e7:31:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:34:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=271925e29ae039d43619d6b4f6442cb37c9e9705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f1:08:61:09:93:d6:d0:a6:ed:3f:ab:a5:8d:
                    1d:ec:31:77:79:22:ed:a6:04:43:51:25:c6:25:03:
                    40:f0:92:e0:d4:bb:1a:bf:63:df:0e:58:29:64:c6:
                    75:97:08:3d:64:b0:a7:eb:d8:e6:15:cb:b2:d2:33:
                    23:37:e6:96:c2:c8:6b:56:47:15:d8:35:8b:11:0d:
                    30:e3:6d:49:46:35:69:e6:04:07:99:d1:2c:ec:c0:
                    82:1a:e2:da:c6:34:27:92:96:b9:a9:72:2e:d3:0c:
                    b1:d5:67:b7:8a:3d:b8:de:68:52:60:77:63:ec:75:
                    1d:18:55:43:53:c1:40:9b:75:34:7b:a2:4a:3b:85:
                    97:e0:0f:5f:dc:55:99:cf:a6:7f:34:39:7c:90:68:
                    53:8d:57:0e:a0:76:14:e7:77:b3:a5:7e:50:e1:74:
                    bb:52:99:f5:ec:7b:8c:d1:3c:83:40:4b:f9:8a:d0:
                    d9:65:70:19:bb:6c:fd:c8:5b:6a:4d:70:c6:f5:7e:
                    d9:55:f3:78:3b:e0:0e:d2:cf:8b:40:fc:ad:89:be:
                    91:ac:02:c9:37:e3:a8:b0:65:d0:22:f9:b0:85:15:
                    a2:c8:99:69:db:70:ea:0a:a8:bf:d0:b7:71:08:bc:
                    0c:46:74:95:46:5e:ab:ab:2e:ff:a6:5d:05:7f:d6:
                    88:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:19:25:E2:9A:E0:39:D4:36:19:D6:B4:F6:44:2C:B3:7C:9E:97:05
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/994e86-d57f-49cf-8246-f776d3336c62/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/994e86-d57f-49cf-8246-f776d3336c62/1/Jxkl4prgOdQ2Gda09kQss3yelwU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.102.0/24
                IPv6:
                  2a12:6400::/29

    Signature Algorithm: sha256WithRSAEncryption
         88:be:20:ab:10:78:23:9f:b8:a3:74:12:23:e6:0c:e1:a4:59:
         bf:23:bb:f5:55:77:d9:15:df:d2:98:d2:dc:db:0e:21:c8:00:
         33:21:ef:42:c9:bd:64:c4:a6:ee:bc:9e:0c:29:2d:4b:5b:97:
         3c:61:d3:22:5d:44:a0:2f:e4:fc:a5:d9:d3:b3:59:bb:1f:eb:
         23:c3:0b:12:c7:aa:f4:01:1c:37:0f:51:f5:d3:bb:86:66:8c:
         55:f5:72:c5:fd:5a:ae:b1:48:af:bb:59:8f:50:dd:68:49:4c:
         eb:76:a9:74:6e:f0:88:66:37:82:53:da:fe:bf:b1:fa:48:25:
         d9:00:47:64:bc:8b:d9:cd:6a:aa:7b:59:19:a8:30:4a:c9:cf:
         fe:52:36:37:fb:5a:69:09:6e:d2:ef:49:cb:8d:e6:ff:3e:ff:
         4c:49:81:05:5a:d5:de:9d:c5:43:41:f2:6e:15:ca:e2:53:8d:
         3c:25:5d:9a:ee:9f:f7:62:2b:e5:e6:d7:2d:7f:14:d8:2d:c3:
         17:53:ed:f5:33:5c:91:44:bf:50:03:3e:42:63:f6:70:d3:3f:
         d4:00:2b:10:34:2e:4d:e5:98:7d:5c:c8:3f:a8:aa:31:68:83:
         ce:71:dc:d1:a7:2d:82:9a:72:e4:c9:0d:d4:8d:fe:dd:2e:30:
         19:a8:f3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----